cicd-technique

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill directs the agent to dump CI/CD runner environment secrets (env, GITHUB_TOKEN, NPM_TOKEN, AWS_ACCESS_KEY_ID) and to base64/hex-encode them for exfiltration to an external collector, so the secret values pass through the LLM's context and output.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.85). The skill is an offensive CI/CD exploitation playbook that directs the agent to dump secrets, establish persistence on self-hosted runners via cron, systemd, or .bashrc, exfiltrate data to an external collector, and backdoor production artifacts, all of which compromise the host and its environment.